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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .1 36{a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S. C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1 )E3 Responsive to communication(s) filed on 15 June 2001 . 
2a)D This action is FINAL. 2b)^ This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quay/e, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1-18 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) Q Claim(s) is/are allowed. 

6) E<] Claim(s) 1-1 8 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) Q Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) Q The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)Q objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1 .121 (d). 

1 1) Q The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 
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a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2.Q Certified copies of the priority documents have been received in Application No. . 

3-D Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 



This office action is responding to the application filed on June 15 , 2001 . 
Claims 1 -1 8 are pending. 



Claim Rejections - 35 USC § 102 

1 . The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

2. Claims 1-18 are rejected under 35 U.S.C. 102(e) as being anticipated by Hind et 
al, US Patent No. 6772331 B1, hereinafter "Hind". 



3. As per claims 1-2, and 13, Hind teaches "A branding process to establish 
cryptographically secured interaction among networked computing devices within a trust 
group on an open multi-access network, comprising: securely networking a security-un- 
initialized device with a branding device via a secured network medium (Col 1 1 lines 5- 
10); transmitting a branding certificate from the branding device to the security-un- 
initialized device via the secured network medium (Col 1 1 lines 47-60), the branding 
certificate instructing that the security-un-initialized device trust the branding device (Col 
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9 lines 15-60, creating a trust between the devices), the branding certificate further 
containing key data for verifying certificates provided by other devices on the open 
multi-access network to the security-un-initialized device are authenticated by the 
branding device (Col 9 lines 35-60); transmitting a trust group membership certificate 
from the branding device to the security-un-initialized device via the secured network 
medium, the trust group membership certificate authenticating that the security-un- 
initialized device is a member of the trust group (Col 10 lines 18-24); and initializing a 
security resolver of the security-un-initialized device to use the key data of the branding 
certificate to authenticate other devices interacting with the security-un-initialized device 
on the open multi-access network are in the trust group (Col 10 lines 18-24, and Col 1 1 
line 5 to Col 12 line 20), and to provide the trust group membership certificate to such 
other devices as authentication that the security-un-initialized device is a member of the 
trust group (Col 10 lines 18-24, such that at least some interaction via the open multi- 
access network with the security-un-initialized device is cryptographically secured to 
only other devices in the trust group (Col 9 lines 15-60)". 

4. As per claim 3, Hind teaches "The branding process of claim 2 wherein securely 
networking the security-un-initialized and branding devices comprises networking the 
devices via a limited access network interface of the security-un-initialized device that is 
separate from the security-un-initialized device's interface to the open multi-access 
network" (Col 1 1 lines 5-65). 
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5. As per claim 4, Hind teaches "The branding process of claim 3 wherein the 
limited access network interface is of a direct device-to-device wired networking 
medium (Col 1 line 65 to Col 2 line 1). 

6. As per claim 5, Hind teaches "The branding process of claim 3 wherein the 
limited access network interface is of a directional wireless networking medium" in (Col 
1 line 55 to Col 2 line 10). 

7. As per claim 6, Hind teaches "The branding process of claim 2 wherein securely 
networking the security-un-initialized and branding devices comprises: placing 
transmitter/receivers of the security-un-initialized and branding devices for an omni- 
directional wireless networking medium into a wave guide and/or Faraday cage; and 
networking the devices with the wave guide and/or Faraday cage via the omni- 
directional wireless networking medium" in (Col 1 line 55 to Col 2 line 10). 

8. As per claim 7, Hind teaches "The branding process of claim 2 further 
comprising: transmitting a principal identifier from the branding device to the security- 
un-initialized device, the principal identifier providing a cryptographically secured identity 
to the security-un-initialized device, the principal identifier containing a public/private key 
pair; and using the public/private key pair to encrypt interaction of the security-un- 
initialized device with said other devices authenticated to be in the trust group" in (Col 
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9. As per claim 8, Hind teaches "The branding process of claim 7 wherein the 
principal identifier further contains a name for the security-un-initialized device, the 
process further comprising identifying the security-un-initialized device to human 
operators using the name" in (Col 12 lines 45-65). 

10. As per claim 9, Hind teaches "The branding process of claim 8 further comprising 
prompting a human user of the branding device to enter the name upon performing the 
branding process on the security-un-initialized device" in (Col 12 lines 45-65). 

11. As per claim 10, Hind teaches "The branding process of claim 2 further 
comprising initially distributing the security-un-initialized device in a retail channel prior 
to having the branding process performed on the security-un-initialized device" in (Col 5 
lines 25). 

12. As per claim 1 1 , Hind teaches "The branding process of claim 1 0 further 
comprising upon completion of initializing the security resolver, disallowing the security- 
un-initialized device from having the branding process again performed on the security- 
un-initialized device until the now initialized security of the security-un-initialized device 
is reset" in (Col 13lines 35-43). 
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13. As per claim 12, Hind teaches "The branding process of claim 10 further 
comprising upon completion of initializing the security resolver, allowing the branding 
process to be performed only via a limited access network interface of the security-un- 
initialized device" in (Col 4 line 53 to Col 5 line 5). 

14. As per claim 14, Hind teaches "The networked computing device of claim 13 
further comprising: a limited access networking interface; and the security initializer 
further operational to accept the branding public key when received from the branding 
device only via the limited access networking interface" in (Col 1 1 lines 5-45). 

15. As per claim 15, Hind teaches "The networked computing device of claim 13 
further comprising: the security initializer further operational to accept the branding 
public key when received from the branding device via the network interface when in an 
initial unbranded state; and a branding reset operational upon activation to return the 
security initializer to the initial unbranded state" in (Col 13 lines 35-43). 

16. As per claim 16, Hind teaches "The networked computing device of claim 13 
further comprising: a branding mode activator operational to place the networked 
computing device in a branding mode; and the security initializer further operational to 
accept the branding public key when received from the branding device via the network 
interface when in the branding mode" in (Col 1 1 lines 5-45). 
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17. As per claim 17, Hind teaches "The networked computing device of claim 13 
further comprising: the security resolver further operational when initialized with a trust 
group membership certificate to provide the trust group membership certificate to other 
devices via the network interface to attest to membership of the networked computing in 
the trust group; and the security initializer further operational to receive the trust group 
membership certificate from the branding device while securely networked to the 
networked computing device, and further operational to initialize the security resolver 
with the trust group membership certificate" in (Col 9 lines 15-65, and Col 10 lines 24- 
30). 

18. As per claim 18, Hind teaches "The networked computing device of claim 13 
further comprising: the security resolver further operational when initialized with a 
public/private key pair to encrypt interaction via the network interface with other devices 
authenticated as in the trust group using the public/private key pair; and the security 
initializer further operational to receive the public/private key pair from the branding 
device while securely networked to the networked computing device, and further 
operational to initialize the security resolver with the public/private key pair" in (Col 1 1 
lines 5-65). 

Conclusion 

19. Any inquiry concerning this communication from the examiner should be directed 
to Linh Son whose telephone number is (571 )-271 -3856. 
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20. If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor Kim Y. Vu can be reached at (571)-272-3859. The fax numbers for this 
group are (703)-872-9306 (official fax). Any inquiry of general nature or relating to the 
status of this application or proceeding should be directed to the group receptionist 
whose telephone number is (571)-272-2100. 

21 . Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval IPAIR.I system. Status information for 
published applications may be obtained from either Private PMR or Public PMR. Status 
information for unpublished applications is available through Private PMR only. For 
more information about the PAIR system, see http://pzr-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 




Linh LD Son 



Patent Examiner 



